Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 07:58:45.790 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49516 9 6412 1 2025-09-01 07:55:22.894 00:05:00.279 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 07:55:22.835 00:05:00.304 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 07:55:22.835 00:05:00.789 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 07:59:46.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34636 9 6412 1 2025-09-01 08:00:56.925 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56636 1 40 1 2025-09-01 07:57:22.922 00:05:00.195 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 07:57:22.842 00:05:00.350 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:01:33.528 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:01:33.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:01:33.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 07:57:37.231 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2416 1 2025-09-01 08:01:57.348 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:48840 1 40 1 2025-09-01 07:58:22.883 00:05:00.721 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 07:58:21.926 00:05:00.938 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:03:58.213 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 1 40 1 2025-09-01 08:00:21.947 00:05:00.898 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:00:21.790 00:05:01.055 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:04:48.251 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43044 10 6452 1 2025-09-01 08:01:22.908 00:05:00.268 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:01:22.843 00:05:00.298 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:01:22.843 00:05:00.782 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:05:59.028 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36286 1 40 1 2025-09-01 08:06:33.770 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:06:33.325 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:06:33.711 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:02:57.237 00:05:10.561 OSPF 23.0.4.2:0 -> 224.0.0.5:0 38 2744 1 2025-09-01 08:03:22.924 00:05:00.199 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:03:22.843 00:05:00.352 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:07:59.805 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37412 1 40 1 2025-09-01 08:04:22.884 00:05:00.725 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:04:21.929 00:05:00.937 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:06:21.955 00:05:00.891 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:06:21.792 00:05:01.054 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:07:22.905 00:05:00.271 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:07:22.845 00:05:00.297 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:07:22.845 00:05:00.784 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:11:33.830 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:11:33.771 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:11:33.986 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:12:01.425 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49240 1 40 1 2025-09-01 08:08:17.241 00:05:10.003 OSPF 23.0.4.2:0 -> 224.0.0.5:0 37 2600 1 2025-09-01 08:13:01.792 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 1 40 1 2025-09-01 08:09:22.847 00:05:00.351 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:09:22.927 00:05:00.197 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:10:22.886 00:05:00.726 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:10:21.934 00:05:00.936 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:14:52.199 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51060 10 6452 1 2025-09-01 08:15:52.597 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39010 10 6452 1 2025-09-01 08:12:21.955 00:05:00.895 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:12:21.800 00:05:01.050 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:16:34.230 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:16:34.007 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:16:34.170 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:13:22.909 00:05:00.268 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:13:22.849 00:05:00.296 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:13:22.849 00:05:00.784 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:13:37.244 00:05:10.006 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2528 1 2025-09-01 08:18:53.983 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42932 9 6412 1 2025-09-01 08:15:22.930 00:05:00.196 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:15:22.850 00:05:00.349 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:20:04.755 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50948 1 40 1 2025-09-01 08:16:22.892 00:05:00.723 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:16:21.939 00:05:00.936 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:21:34.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:21:33.841 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:21:33.901 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:21:55.158 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40720 9 6412 1 2025-09-01 08:18:21.958 00:05:00.896 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:18:21.801 00:05:01.053 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:18:57.249 00:05:10.015 OSPF 23.0.4.2:0 -> 224.0.0.5:0 34 2388 1 2025-09-01 08:19:22.912 00:05:00.280 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:19:22.852 00:05:00.295 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:19:22.852 00:05:00.783 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:23:55.904 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36206 10 6452 1 2025-09-01 08:21:22.855 00:05:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:21:22.935 00:05:00.191 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:22:22.895 00:05:00.720 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:22:21.939 00:05:00.936 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:26:34.326 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:26:34.223 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:26:34.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:26:57.089 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38804 10 6452 1 2025-09-01 08:24:21.959 00:05:00.898 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:24:21.802 00:05:01.055 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:24:17.265 00:05:10.005 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2368 1 2025-09-01 08:28:57.902 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47572 10 6452 1 2025-09-01 08:25:22.854 00:05:00.781 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:25:22.854 00:05:00.293 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:25:22.914 00:05:00.267 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:29:58.319 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60968 10 6452 1 2025-09-01 08:27:22.855 00:05:00.347 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:27:22.935 00:05:00.192 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:31:34.178 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:31:34.098 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:31:34.119 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:28:22.898 00:05:00.718 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:28:21.940 00:05:00.939 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:32:59.507 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45716 10 6452 1 2025-09-01 08:29:37.271 00:05:10.007 OSPF 23.0.4.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-01 08:33:59.917 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:36364 9 6412 1 2025-09-01 08:30:21.959 00:05:00.899 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:30:21.803 00:05:01.055 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:35:00.347 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43138 10 6452 1 2025-09-01 08:31:22.857 00:05:00.290 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:31:22.857 00:05:00.778 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:31:22.918 00:05:00.266 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:36:00.711 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59692 10 6452 1 2025-09-01 08:36:34.368 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:36:34.367 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:36:34.307 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:33:22.859 00:05:00.345 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:33:22.939 00:05:00.190 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:38:11.903 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36486 1 40 1 2025-09-01 08:34:22.898 00:05:00.719 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:34:21.942 00:05:00.937 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:34:57.277 00:05:10.011 OSPF 23.0.4.2:0 -> 224.0.0.5:0 40 2852 1 2025-09-01 08:39:01.941 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39452 10 6452 1 2025-09-01 08:40:02.339 00:00:10.740 TCP 1.101.0.1:3000 -> 23.104.0.1:35880 10 6452 1 2025-09-01 08:36:21.963 00:05:00.896 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:36:21.805 00:05:01.054 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:37:22.859 00:05:00.290 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:37:22.859 00:05:00.782 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:37:22.919 00:05:00.266 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:41:34.123 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:41:34.069 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:41:34.129 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:42:13.906 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42006 1 40 1 2025-09-01 08:39:22.858 00:05:00.347 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:39:22.939 00:05:00.190 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:44:04.379 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42174 10 6452 1 2025-09-01 08:40:22.900 00:05:00.722 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:40:21.944 00:05:00.937 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:40:17.288 00:05:10.003 OSPF 23.0.4.2:0 -> 224.0.0.5:0 38 2728 1 2025-09-01 08:46:15.561 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45876 1 40 1 2025-09-01 08:42:21.964 00:05:00.896 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:42:21.806 00:05:01.055 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:46:34.426 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:46:34.482 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:46:34.543 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:47:05.599 00:00:10.984 TCP 1.101.0.1:3000 -> 23.104.0.1:42008 9 6412 1 2025-09-01 08:43:22.860 00:05:00.293 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:43:22.860 00:05:00.783 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:43:22.921 00:05:00.267 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:45:22.861 00:05:00.346 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:45:22.941 00:05:00.192 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:45:37.291 00:05:10.009 OSPF 23.0.4.2:0 -> 224.0.0.5:0 32 2176 1 2025-09-01 08:46:22.901 00:05:00.722 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:46:21.945 00:05:00.940 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:51:07.836 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47374 9 6412 1 2025-09-01 08:51:35.072 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:51:34.862 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:51:35.132 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:52:08.214 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 9 6412 1 2025-09-01 08:48:21.810 00:05:01.056 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:48:21.966 00:05:00.900 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:53:18.961 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:45774 1 40 1 2025-09-01 08:49:22.865 00:05:00.288 TCP 23.155.0.1:179 -> 23.158.0.1:40787 12 738 1 2025-09-01 08:49:22.865 00:05:00.778 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-09-01 08:49:22.925 00:05:00.267 TCP 23.157.0.1:40165 -> 23.155.0.1:179 12 738 1 2025-09-01 08:50:57.301 00:05:10.012 OSPF 23.0.4.2:0 -> 224.0.0.5:0 35 2452 1 2025-09-01 08:55:19.781 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35954 1 40 1 2025-09-01 08:51:22.865 00:05:00.349 TCP 23.155.0.1:179 -> 23.157.0.1:40165 12 738 1 2025-09-01 08:51:22.947 00:05:00.188 TCP 23.158.0.1:40787 -> 23.155.0.1:179 12 738 1 2025-09-01 08:52:22.906 00:05:00.718 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-09-01 08:52:21.946 00:05:00.942 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-09-01 08:56:34.541 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:56:34.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 08:56:34.695 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 08:57:10.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41630 10 6452 1 2025-09-01 08:54:21.968 00:05:00.900 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-09-01 08:54:21.811 00:05:01.057 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-09-01 08:58:10.638 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59740 10 6452 1 Summary: total flows: 173, total bytes: 251820, total packets: 1819, avg bps: 524, avg pps: 0, avg bpp: 138 Time window: 2025-09-01 07:55:22 - 2025-09-01 08:59:22 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0027s User: 0.0018s Wall: 0.0022s flows/second: 80019.3 Runtime: 0.0022s